To all 1.8 billion users Gmail a “was launchedred alert“For a scam by hackers who could access their accounts. The attack exploit artificial intelligence, creating both automatic calls deepfake that-email able to circumvent the stringent safety filters.
How the scam works
The combo between phone call and email is used by convince The victims that their Gmail account has been compromised. Users receive a phone call in which they are communicated that a suspected activity has been detected in their account and that they will soon receive an email with the instructions to solve the problem. In the email a false website is shown, identical to that of Google, who asks users to insert the access credentials.
Computer security experts explained that the goal is to: “convince the victim to provide the user’s Gmail recovery code, claiming that it is necessary to restore the account“ money and sensitive data.
The FBI alarm
On the scam, the FBI is also investigating, which has all urged to pay close attention since: “These sophisticated tactics can cause devastating financial losses, damage to the reputation and compromise of sensitive data“This above all because the artificial intelligence tools available to IT criminals have a relatively low cost: in a study, the researchers from the Malwarebytes company have discovered that the cost of advanced and sophisticated e-mail attacks starts only 5 dollars, adding that the warning of the FBI: “It must not be taken lightly“.
In this: “None of the elements used in the attacks is new, but their combination could make the scam extremely effective“, The security experts explained. The company has also published some guidelines that Gmail users must follow in order not to fall victim to hackers.
The guidelines
Users don’t have to never Click on links or download files from email or reply to messages of which the origin is absolutely not certain. Also don’t enter information personal On websites unless they are 100% sure.
Use a password manager to automatically fill in the credentials only on the sites reliable and monitor your accounts to identify any signals of access unauthorized o Data losses.